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CLAIMS 



What is claimed is : 

1 1. A mating key gateway adapted to retrieve at 

2 least one mating key used to encrypt a program key that is 

3 used to scramble digital content prior to transmission to 

4 a digital device, comprising: 

5 a bus ; 

6 a processor coupled to the bus; 

7 an interface coupled to the bus, the interface being 

8 adapted to receive information from (1) a sender of the 

9 digital content and (2) either a server controlled by a 

10 supplier of the digital device or a trusted third party; 

11 and 

12 a non-volatile storage unit coupled to the bus, the 

13 non-volatile storage unit to store a mating key lookup 

14 table to identify either the server controlled by the 

15 supplier of the digital device or the trusted third party 

16 based on the information received from the sender. 

1 2. The mating key gateway of claim 1, wherein the 

2 interface to receive the information from the sender being 

3 one of a cable provider, a satellite-based provider, a 

4 terrestrial -based provider, an Internet service provider 

5 and a conditional access (CA) provider operating with one 

6 of the cable provider, the satellite-based provider, the 

7 terrestrial -based provider and the Internet service 

8 provider. 

1 3. The mating key gateway of claim 2, wherein the 

2 interface to receive information from the supplier being a 

3 manufacturer of the digital device. 

1 4. The mating key gateway of claim 2, wherein the 

2 information received by the interface from the sender 
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3 comprises a mating key generator being a message that 

4 comprises an identifier of the supplier. 

1 5. The mating key gateway of claim 4, wherein the 

2 mating key generator received by the interface further 

3 comprises an identifier of a provider of a system that 

4 enables transmission of both the digital content and the 

5 mating key generator to the digital device. 

1 6. The mating key gateway of claim 5, wherein the 

2 mating key generator received by the interface further 

3 comprises (i) an identifier that identifies a conditional 

4 access (CA) system provider over which the digital content 

5 and the mating key generator are transmitted, and (ii) a 

6 mating key sequence number. 

1 7. The mating key gateway of claim 1, wherein the 

2 mating key lookup table stored by the non-volatile storage 

3 unit comprises (i) a first group of entries forming a 

4 range of serial numbers for digital devices supplied by 

5 each supplier of a plurality of suppliers including the 

6 supplier, and (ii) a second group of entries corresponding 

7 to the first group of entries, each entry of the second 

8 group of entries including information to establish 

9 communications with a server controlled by one of the 
10 plurality of suppliers. 

1 8. The mating key gateway of claim 1, wherein the 

2 mating key lookup table stored by the non-volatile storage 

3 unit comprises (i) a first group of entries forming a 

4 range of serial numbers for digital devices supplied by 

5 each supplier of a plurality of suppliers including the 

6 supplier, and (ii) a second group of entries corresponding 

7 to the first group of entries, each entry of the second 

8 group of entries including an address to establish 
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9 communications with a trusted third party authorized by 

10 one of the plurality of suppliers. 

1 9. The mating key gateway of claim 4, wherein the 

2 mating key lookup table stored by the non-volatile storage 

3 unit comprises (i) a first group of entries forming a 

4 range of mating key generators for digital devices 

5 supplied by each supplier of a plurality of suppliers 

6 including the supplier, and (ii) a second group of entries 

7 corresponding to the first group of entries, each entry of 

8 the second group of entries including information to 

9 establish communications with a server controlled by one 
10 of the plurality of suppliers. 

1 10. The mating key gateway of claim 9, wherein the 

2 information includes an address to establish 

3 communications over a network. 

1 11. The mating key gateway of claim 4, wherein the 

2 mating key lookup table stored by the non-volatile storage 

3 unit comprises (i) a first group of entries forming a 

4 range of mating key generators for digital devices 

5 supplied by each supplier of a plurality of suppliers 

6 including the supplier, and (ii) a second group of entries 

7 corresponding to the first group of entries, each entry of 

8 the second group of entries including at least one mating 

9 key uniquely corresponding to one of the mating key 
10 generators. 

1 12 . A mating key gateway adapted to retrieve a 

2 mating key used to encrypt a program key that is used to 

3 scramble digital content prior to transmission to a 

4 digital device, the mating key gateway comprising: 

5 a processor; 

6 an interface in communication with the processor, the 

7 interface being adapted to exchange information with (1) a 
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8 headend and (2) a server configured to store a mating key 

9 associated with the digital device; and 

10 a non-volatile storage unit to store a mating key 

11 lookup table to identify the server based on the 

12 information received from the headend. 

1 13. The mating key gateway of claim 12, wherein the 

2 interface receives the mating key from the server being 

3 controlled by a manufacturer of the digital device. 

1 14. The mating key gateway of claim 13 , wherein the 

2 information received by the interface from the headend 

3 comprises a mating key generator being a message that 

4 comprises an identifier of the manufacturer of the digital 

5 device . 

1 15. The mating key gateway of claim 14, wherein the 

2 mating key generator received by the interface further 

3 comprises (i) an identifier that identifies a conditional 

4 access (CA) system provider over which the digital content 

5 and the mating key generator are transmitted, and (ii) a 

6 mating key sequence number. 

1 16. The mating key gateway of claim 12, wherein the 

2 mating key lookup table stored by the non-volatile storage 

3 unit comprises (i) a first group of entries forming a 

4 range of serial numbers of digital devices supplied by 

5 each of a plurality of manufacturers, and (ii) a second 

6 group of entries corresponding to the first group of 

7 entries, each entry of the second group of entries 

8 including information to establish communications with a 

9 server controlled by one of the plurality of 
1 0 manufacturers . 



1 

2 
3 



17. The mating key gateway of claim 16, wherein the 
server controlled by one of the plurality of manufacturers 
is the server. 
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1 18. The mating key gateway of claim 14, wherein the 

2 mating key lookup table stored by the non-volatile storage 

3 unit comprises (i) a first group of entries forming a 

4 range of mating key generators associated with digital 

5 devices supplied by each of a plurality of manufacturers, 

6 and (ii) a second group of entries corresponding to the 

7 first group of entries, each entry of the second group of 

8 entries including information to establish communications 

9 with a server controlled by one of the plurality of 
10 manufacturers. 

1 19. The mating key gateway of claim 18, wherein the 

2 information includes an address to establish 

3 communications over a network. 

1 20. The mating key gateway of claim 12 being adapted 

2 to additionally store mating keys for selected digital 

3 devices. 

1 21. A secure content delivery system comprising: 

2 a trusted third party to store a plurality of mating 

3 keys associated with digital devices, each mating key 

4 being used to encrypt a key that is used to scramble 

5 digital content ; and 

6 a mating key gateway in communications with the 

7 trusted third party, the mating key gateway to provide 

8 information received from a headend to the trusted third 

9 party for retrieval of a requested mating key. 

1 22. The secure content delivery system of claim 21, 

2 wherein the key used to scramble the digital content is a 

3 program key. 

1 23. The secure content delivery system of claim 22, 

2 wherein the information provided to the trusted third 

3 party comprises a mating key generator being a message 
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4 that comprises an identifier of a supplier of one of the 

5 digital devices. 

1 24. The secure content delivery system of claim 23, 

2 wherein the identifier of the supplier included in the 

3 mating key generator identifies a manufacturer of the one 

4 of the digital devices. 

1 25. The secure content delivery system of claim 23, 

2 wherein the mating key generator provided to the trusted 

3 third party further comprises an identifier of a provider 

4 of the secure content delivery system that enables 

5 transmission of both the digital content and the mating 

6 key generator to the one of the digital devices. 

1 26. The secure content delivery system of claim 23, 

2 wherein the mating key generator provided to the trusted 

3 third party further comprises (i) an identifier that 

4 identifies a conditional access (CA) system provider over 

5 which the digital content and the mating key generator are 

6 transmitted, and (ii) a mating key sequence number. 

1 27. A method comprising: 

2 receiving a mating key generator; and 

3 outputting a mating key based on the mating key 

4 generator and an one-time programmable value being 

5 identical to a key stored in a digital device of a set-top 

6 box targeted to receive information encrypted with either 

7 the mating key or a derivative of the mating key. 

1 28. The method of claim 27, wherein prior to 

2 outputting the mating key, the method further comprises: 



3 receiving a serial number being used to locate the 

4 one-time programmable value. 
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1 29. The method of claim 27, wherein prior to 

2 outputting the mating key, the method further comprises: 

3 computing the mating key by performing a computation 

4 on the mating key generator and the one-time programmable 

5 value to produce the mating key. 

1 30. The method of claim 27, wherein the mating key 

2 generator includes at least one of (i) a first identifier 

3 to identify a manufacturer of the digital device, (ii) a 

4 service provider identifier, (iii) a conditional access 

5 provider identifier, and (iv) a mating key sequence 

6 number. 

1 31. The method of claim 27, wherein prior to 

2 outputting the mating key, the method further comprises: 

3 computing the mating key by performing a computation 

4 on the mating key generator and the one-time programmable 

5 value. 

1 32. A conditional access (CA) control system in 

2 communication with a mating key server, the CA control 

3 system comprising: 

4 means for receiving a mating key from the mating key 

5 server, the mating key being computed based on a mating 

6 key generator and a one-time programmable value; and 

7 means for producing a plurality of derivatives keys 

8 based on the mating key, each derivative key being used to 

9 encrypt a key that is configured to descramble digital 
10 content targeted for a digital device of a set- top box. 

1 33. The CA control system of claim 32, wherein the 

2 key configured to descramble the digital content is a 

3 program key. 
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1 34. The CA control system of claim 32 further 

2 comprising: 

3 transmitting the encrypted program key and the 

4 scrambled digital content to the digital device of the 

5 set -top box. 

1 35. A method comprising: 

2 receiving a request for a key over a communication 

3 bus ; 

4 recovering different versions of the key depending on 

5 which of a plurality of providers is requesting the key; 

6 and 

7 providing the different versions of the key to the 



8 plurality of providers adapted to use the key as either a 

9 mating key to encrypt digital content delivered to a 

10 targeted digital device or as a precursor key to derive 

11 the mating key to encrypt the digital content delivered to 

12 the targeted digital device. 



1 36. The method of claim 35, wherein the recovering 

2 of the key includes accessing a database to retrieve the 

3 key being a pre-calculated value. 

1 37. The method of claim 35, wherein the recovering 

2 of the key includes calculating the key substantially in 

3 real time based on a unique key associated with the 

4 targeted digital device, an identical copy of the unique 

5 key being permanently stored within the targeted digital 

6 device. 

1 38. The method of claim 35, wherein the providing of 

2 the key is transmitted to at least one conditional access 

3 provider, to at least one service provider or to at least 

4 one conditional access provider and at least one service 

5 provider. 



